Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa
File:                     fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa (raw, json)
Hash identifier:          PonzeJVO99mk4U1ToHueboZudUqmR8v82mxxD6hCpNc=
Subject key identifier:   5B:8F:7B:85:57:BD:25:30:2A:3F:AD:70:52:4A:14:E4:FA:4D:58:B6
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285847299B2A5DB0C7EE1F9621A240
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     54032
IP address blocks:        72.233.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:2a:5d:b0:c7:ee:1f:96:21:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=08d95a36-108e-43a9-9a70-674e4d94b7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:ff:a0:32:0c:84:90:41:54:cc:b8:b7:60:
                    a8:1f:24:84:53:60:18:a1:e1:6d:33:91:bc:16:89:
                    45:af:da:5d:f4:a4:00:6c:e5:9d:bb:78:a0:83:ea:
                    40:ff:8b:51:86:86:d4:da:60:ae:24:dc:c5:eb:76:
                    1c:ae:92:0c:f9:0d:ce:e9:23:d6:0a:e1:d8:d6:87:
                    66:ab:6a:b4:86:82:ff:a9:2b:ba:b0:96:af:f0:a1:
                    56:2c:8c:fa:d7:82:d1:1c:33:ef:5f:b2:c2:db:80:
                    72:1b:fd:61:b5:7f:79:4e:ec:11:04:f0:f5:42:9b:
                    2d:70:75:38:a7:8f:66:45:aa:65:ff:5f:07:37:09:
                    83:88:af:20:c1:21:6c:d6:d2:8a:26:ef:03:9c:bb:
                    70:a5:f3:e9:d5:29:3d:03:a5:f6:f4:89:4e:45:41:
                    46:c8:99:7e:b7:1c:27:bb:f7:b0:32:2e:7c:93:07:
                    ff:8b:d4:68:3d:d7:48:22:74:31:10:1c:89:c1:5f:
                    5d:b8:0a:35:a3:31:b0:54:af:09:af:07:ee:c7:4c:
                    2c:ac:c8:29:7a:3e:45:6f:5b:c9:22:09:af:39:6b:
                    66:dd:6a:f9:52:a5:86:66:27:de:1b:5f:3c:16:4d:
                    02:b5:42:f9:72:a5:f1:cb:3b:16:fb:e4:a1:db:a8:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:7B:85:57:BD:25:30:2A:3F:AD:70:52:4A:14:E4:FA:4D:58:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:22:5f:7a:76:b1:c5:c5:32:41:ce:ca:90:2e:42:a4:bd:9c:
         ef:34:ad:04:3a:88:9c:f5:d8:14:16:50:eb:b9:8c:27:35:c5:
         d1:9e:9d:a9:98:32:98:a9:32:c4:8e:d9:2e:71:52:2a:68:da:
         56:84:6b:a5:da:8a:57:6c:22:8f:40:9f:84:e7:d7:a5:e2:b2:
         e5:f5:81:97:c0:56:5d:84:4d:23:db:b9:aa:61:5c:65:1c:f0:
         57:4f:f1:c2:e7:7b:f8:7b:35:65:d3:3b:f4:d3:76:94:34:e7:
         8d:cb:73:9e:22:af:c4:b5:ba:59:05:25:db:0d:22:fb:82:98:
         55:0e:b3:7c:8b:09:02:ee:35:3a:05:36:14:df:aa:50:27:cc:
         93:da:1c:8a:61:ea:83:6a:9d:ab:ed:dc:54:f6:71:fd:c1:0a:
         99:f0:59:ef:c4:a6:47:aa:ba:bf:60:df:c1:ac:f5:55:97:bf:
         01:fa:9c:ad:dc:a9:21:28:39:9d:af:94:67:79:4b:fb:2f:2a:
         8a:dd:02:0c:49:e1:bb:47:9d:90:99:43:3e:d9:20:da:10:80:
         b7:88:6d:95:95:2f:f4:56:cd:cd:d2:4d:2f:9e:68:4a:b3:ce:
         a0:bd:78:cf:3e:5e:5f:34:02:3b:d2:02:72:ce:e1:42:34:cb:
         0f:bc:4d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:48 2024 by rpki-client on console-ams.rpki-client.org